CVE-2016-2992

IBM InfoSphere BigInsights Web Console is vulnerable to Cross‑Site Scripting (CVE-2016-2992) due to improper validation of user input in the Web UI. The related IBM advisory also covers CVE-2016-2924. Affected product: IBM InfoSphere BigInsights 4.2; vulnerability allows an attacker to embed arbi...

CVE-2016-6059

IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

CVE-2016-5984

IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to...

CVE-2016-5984

IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to...

CVE-2016-5994

IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents...

Xxe

IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

Cross site scripting

IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to...

Design/Logic Flaw

IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents...

CVE-2016-6059

IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

CVE-2016-5984

CVE-2016-5984 affects IBM InfoSphere Information Server and ISF/InfoSphere on Cloud. The vulnerability is a cross-frame scripting issue due to insufficient HTML iframe protection, enabling a remote attacker to use a crafted URL to perform clickjacking or similar client-side browser attacks. Affec...

CVE-2016-5994

IBM InfoSphere Information Server (11.5) is affected by CVE-2016-5994: an authenticated user can browse arbitrary files on the engine tier and read contents (information disclosure). The IBM Security Bulletin notes the vulnerability, lists affected product/version (InfoSphere Information Server 1...

CVE-2016-6059

CVE-2016-6059 affects IBM InfoSphere Information Server and related components. The vulnerability arises from an XML External Entity Injection (XXE) during XML data processing, enabling a remote attacker to cause denial of service and potentially expose sensitive data or exhaust memory. Affected ...

CVE-2016-5994

IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents...

CVE-2016-5984

IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to...

CVE-2016-5984: Improper Neutralization of Input During Web Page Generation

IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to...

PT-2017-8873

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server affected versions not specified Description The issue is related to an XML External Entity Injection XXE error when processing XML data, which can lead to a denial of service. A remote attacker could exploit...

PT-2017-9919

Name of the Vulnerable Software and Affected Versions IBM InfoSphere DataStage affected versions not specified Description The issue is related to cross-frame scripting due to insufficient HTML iframe protection. A remote attacker could exploit this by using a specially-crafted URL to navigate to...

CVE-2016-5994: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents...

PT-2017-9918

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server affected versions not specified Description The issue allows attackers to render a page in quirks mode, facilitating the injection of malicious CSS through a Path-relative stylesheet import. Recommendations At...

PT-2017-8839

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server affected versions not specified Description The issue is related to cross-frame scripting due to insufficient HTML iframe protection. A remote attacker could exploit this by using a specially-crafted URL to...